CVE-2022-31353

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/viewservice.php?id=...

CVE-2022-31346

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletebooking...

CVE-2022-31345

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manageuser&id=...

CVE-2022-30817

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

Sql injection

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

Sql injection

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

Sql injection

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...

Online Car Wash Booking System SQL注入漏洞

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/classes/Master.php?f =deleteservice page lacks validation of external input SQL...

Online Car Wash Booking System SQL注入漏洞

Online Car Wash Booking System is an online car wash booking system from Carlo Montero. v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/services/ manageservice.php?id=The page lacks validation for external input SQL statements, which can b...

CVE-2022-31342

Online Car Wash Booking System v1.0 is vulnerable to arbitrary file deletion via /ocwbs/classes/Master.php?f=delete_img, due to lack of validation for file names in Master.php. Affected component/file: Master.php (delete_img). Consequences stated: arbitrary deletion of files. Connected Red Hat/CV...

CVE-2022-31343

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/viewdetails&id=...

CVE-2022-31343

CVE-2022-31343 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the admin view: /ocwbs/admin/?page=bookings/view_details&id=, caused by lack of input validation for the id parameter. CVSS indicators in the entry show high/critical impact (C/I/A: Partial/Partial...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletebooking...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection at /ocwbs/classes/Master.php?f=delete_booking. The Red Hat, CNVD, CNNVD, and NVD records corroborate a persistent SQLi flaw originating from lacking input validation in that endpoint, enabling potential unauthorized data access or...

CVE-2022-31345

CVE-2022-31345 affects Online Car Wash Booking System v1.0. Vulnerability: SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. Root cause: input is not validated in the manage_user endpoint, enabling arbitrary SQL execution. Impact: potential exposure/alteration of database data as describ...

CVE-2022-31346

CVE-2022-31346 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the delete_service path handled by /ocwbs/classes/Master.php?f=delete_service, caused by lack of validation of external input. Impact per sources includes potential exposure of sensitive data and f...

CVE-2022-31347

CVE-2022-31347 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. The issue arises from improper validation/sanitization of external input in that endpoint, enabling attackers to craft input that manipulates SQL statem...

CVE-2022-31348

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-31348

CVE-2022-31348 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in /ocwbs/admin/bookings/update_status.php?id=, caused by lack of input validation for external SQL statements. Impact described as potential data exposure/illicit database access; exploitation detail...